IBM Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects IBM MQ Appliance (CVE-2015-7575) - United States  SECURITY BULLETIN

SUMMARY
 The MD5 “SLOTH” vulnerability on TLS 1.2 affects IBM MQ Appliance

VULNERABILITY DETAILS
CVEID: CVE-2015-7575 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575]
DESCRIPTION: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials.
CVSS Base Score: 7.1
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/109415 [https://exchange.xforce.ibmcloud.com/vulnerabilities/109415] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N)

AFFECTED PRODUCTS AND VERSIONS
IBM MQ Appliance M2000

REMEDIATION/FIXES
Apply the ifix for APAR IT13296 [http://www.ibm.com/support/fixcentral/swg/selectFix?product=ibm/WebSphere/IBM%20MQ%20Appliance%20M2000&fixids=8.0.0.4-IBM-MQ-Appliance-M2000-IT13223&function=fixId&parent=ibm/WebSphere].

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v3 Guide [http://www.first.org/cvss/user-guide]
On-line Calculator v3 [http://www.first.org/cvss/calculator/3.0] RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/PSIRT] ACKNOWLEDGEMENT
Reported to IBM by Karthikeyan Bhargavan at INRIA in Paris, France

CHANGE HISTORY
 26 January 2016 Original Version Published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

PRODUCT ALIAS/SYNONYM
 IBMMQ

Question: Help with Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects IBM MQ Appliance (CVE-2015-7575) I need to understand details regarding Security Bulletin: Vulnerability in MD5 Signature and Hash Algorithm affects IBM MQ Appliance (CVE-2015-7575). Where can I find this information?

Answer:
CVEID: CVE-2015-7575 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7575]
DESCRIPTION: The TLS protocol could allow weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker could exploit this vulnerability using man-in-the-middle techniques to impersonate a TLS server and obtain credentials.
CVSS Base Score: 7.1
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/109415 [https://exchange.xforce.ibmcloud.com/vulnerabilities/109415] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N)


IBM Tivoli Monitoring: HMC Base Agent 6.2.2.3-TIV-ITM_HMC_BASE-IF0004 - United States  DOWNLOADABLE FILES

ABSTRACT
 This fix resolves the APARs listed in the APAR Number(s) section below, and adds enhancement feature 215857 to add hardware events.

DOWNLOAD DESCRIPTION
Copyright International Business Machines Corporation 2015.
All rights reserved.

Component: IBM(R) Tivoli(R) Monitoring: HMC Base Agent,
Version 6.2.2.3

Component ID: 5724C04HB

Interim Fix 0004, 6.2.2.3-TIV-ITM_HMC_BASE-IF0004

Date: October 20, 2015

Contents:

1.0 General description
2.0 Problems fixed
3.0 Architecture and prerequisites
4.0 Image directory contents
5.0 Installation instructions
6.0 Additional installation information
7.0 Known problems and workarounds
8.0 Additional product information
9.0 Copyright and trademark information
10.0 Notices

1.0 General description
===============
This fix resolves the APARs and defects listed in the "Problems Fixed"
section below.

2.0 Problems fixed
============
The following problems are addressed by this fix.

2.1 APARs
---------------

APAR: IV67769
Abstract: APPLICATION SUPPORT MISMATCH WARNING MESSAGE
Additional information: After installing interim fix
6.2.2.3-TIV-ITM_HMC_BASE-IF0003, the Tivoli Enterprise
Portal might display a warning indicator that states
Application Support Mismatch and shows HMC Base Servers
with Client Version 06220302 and Server Version 06220303.

2.3 Enhancements
------------------
Feature: 215857
Abstract: New Hardware Events Attribute Group
Additional information: Add a new attribute group to collect
hardware events from the Hardware Management
Console (HMC).

Attribute group name: Hardware Events
Table name : KPHHDWEVNTS
Warehouse table name: KPH_HARDWARE_EVENTS or KPHHDWEVNTS

Attribute descriptions:

Problem_No - The problem number of the event.
Reference_Code - The reference code for the event.
First_Report_Time - The first time when the event was reported.
PMH_No - The IBM hardware support PMR number that
was created if the call home was successful.
Firmware_Fix - The Firmware Fix for the event.
Service_Event_Text - The description of the service event.
Approval_State - The event approval state, either approved or
unapproved.
Duplicated_Count - The number of times the event has occurred.
Severity - The event severity.
System_MTMS - The machine type/model of the server
reporting the event.
Enclosure_MTMS - The machine type/model of the enclosure
system reporting the event.
Created_Time - The time the event was created.
Event_Time - The time the event was reported.
Call_Home_Intended - Defines if call home was intended for this
event, either true or false.
Analyzing_MTMS - The machine type/model of the analyzing system.
Reference_Code_Extent - The extent of reference code.
System_Ref_code - The system reference code.

2.4 Superseded fixes
---------------------
6.2.2.3-TIV-ITM_HMC_BASE-IF0003
6.2.2.3-TIV-ITM_HMC_BASE-IF0002
6.2.2.3-TIV-ITM_HMC_BASE-IF0001

2.5 APARs and defects included from superseded fixes
---------------------------------------------------------------

6.2.2.3-TIV-ITM_HMC_BASE-IF0003
---------------------------------
APAR: IV60709
Abstract: NO CPU DATA WHEN HMC TIME ZONE IS SET TO BST
Additional information: If the Hardware Management Console (HMC)
time zone is set to BST, data might not be collected.
The data provider might use the incorrect time zone
because BST can represent more than one time zone, for
example, British Summer Time and Bangladesh Standard
Time. When the data provider sends the commands to the
HMC to collect the CPU data, the start and stop times of
the commands might not be correct and might not receive
any data. Also, data might be collected, but for the
wrong time frame.

6.2.2.3-TIV-ITM_HMC_BASE-IF0002
---------------------------------
Feature: 208626
Abstract: LPAR Memory Attributes
Additional information: The following new attributes are added in
the Server LPARs attribute group:

Current_Memory - The current amount of memory, in megabytes,
configured for the LPAR.
Warehouse name: CM0
Running_Memory - The amount of memory, in megabytes, varied on-line
by the LPAR.
Warehouse name: RM

In order to display these new attributes in the Tivoli Enterprise
Portal, use the Query Editor and select Server LPARs_V9 under
KPH SERVER LPARS.

6.2.2.3-TIV-ITM_HMC_BASE-IF0001
---------------------------------

APAR: IV47101
Abstract: NO CPU DATA DUE TO TIME OUTS ON HMC SSH CALLS
Additional information: In large environments, where there are more
than 150 LPARs on a server, the CPU Units used and CPU
Used Pct might display "Not Collected." The
kph_data_provider_<instance>_0.log displays the
following message:
--
SEVERE: SSHCommandExecutor.call: Timed out while waiting
for `lslparutil -m "<server>" -r "lpar" -s s -F
'lpar_id|time|time_cycles |
entitled_cycles|capped_cycles|uncapped_cycles| idle_cycles'
--

APAR: IV50134
Abstract: NO CPU DATA WHEN HMC TIME SET TO GMT FORMAT
Additional information: If the HMC time zone is set to a GMT format,
for example, GMT-08:00, CPU data might not be collected
because the data provider does not recognize the GMT
format and will default to using the local time zone.
When the data provider sends the commands to the HMC to
collect the CPU data, the start and stop times of the
commands might not be correct and might not receive any
data. It is also possible that data will be collected,
but for the wrong time frame.

APAR: IV50135
Abstract: NO DATA IN MEMORY AND PAGING SPACE VIEW
Additional information: The System workspace might not display any
data in the Memory and Paging Space views. This can
happen when the HMC commands:
---
monhmc -r swap -n 0
monhmc -r mem -n 0
---
return data in M bytes instead of k bytes:
---
Swap: 1992M total, 0M used, 1992M free, 2853M cached
Mem: 24336M total, 4534M used, 19801M free, 480M buffers
---

APAR: IV50686
Abstract: NO CPU DATA IN NON-ENGLISH LOCALE
Additional information: When the agent runs in a non-English locale,
attributes "CPU Units Used" and "CPU Used Pct" might
display as "Not Collected" due to a Java problem. The
kph_data_provider_0.log will have a message similar to
this:
---
WARNING:
ManagementConsoleInventoryItemBuilder$BasicDataCommand.
processResult: An error occurred while parsing the N2 date
field "Fri Sep 27 11:35:31 JST 2013". Continuing.
---

2.2 Defects
---------------
Defect: 207939
Abstract: Java CPCI - deadlock due to bad lock usage in some versions
of Java runtime
Additional information: Classloading and resource loading might get
locks in the wrong order, due to Java APAR IZ96933,
causing the data provider to stop collecting data. This
fix prevents the problem no matter what version of Java is
running.

Defect: 208541
Abstract: Add log messages to show data sent to kphagent
Additional information: At log level of FINEST, show the contents of
the rows of data sent from the data provider to the
kphagent process.

3.0 Architecture and prerequisites
======================
This fix is supported on all operating systems listed in the
IBM Tivoli Monitoring: HMC Base Agent User's Guide, version 6.2.2.3.

Please refer to the IBM Software Product Compatability Reports (SPCR)
for the latest operating system certification information:
http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity/index.html [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity/index.html]

3.1 Prerequisites for this fix
--------------------------------
The prerequisite level for this fix is as follows:

IBM Tivoli Monitoring: HMC Base Agent, Version 6.2.2 Interim
Feature 3, which is available from PassPort Advantage under the
following eAssembly:

IBM Tivoli Monitoring for System p V6.2.2 Interim Feature 3, English
(CIH93EN) (Both agent and support files are included in this one
package)
IBM Tivoli Monitoring for System p V6.2.2 Interim Feature 3, Language
Support, Multiplatform, Multilingual (CIH94ML)

For details, see the Troubleshooting Wiki:

https://www.ibm.com/developerworks/mydeveloperworks/wikis/home?lang=en#/wiki/Tivoli%20Monitoring/page/System%20P%20Agents [https://www.ibm.com/developerworks/mydeveloperworks/wikis/home?lang=en#/wiki/Tivoli%20Monitoring/page/System%20P%20Agents]

As this fix is cumulative, it can be installed on any fix level for
this version, release, and mod level above the prerequisite.

4.0 Image directory contents
===================
This fix image contains the following files:
- 6.2.2.3-TIV-ITM_HMC_BASE-IF0004.README - This README file
- 6.2.2.3-TIV-ITM_HMC_BASE-IF0004.tar - Fix archive .tar format
- 6.2.2.3-TIV-ITM_HMC_BASE-IF0004.zip - Fix archive .zip format.

Note: The .tar and .zip files are identical in content. Use the .tar
file if you are working in a UNIX(R) environment; use the .zip file if
you are working in a Windows(R) environment.

The fix archive file contains the following files:
- 6.2.2.3-TIV-ITM_HMC_BASE-IF0004/kphaix526.dsc
- 6.2.2.3-TIV-ITM_HMC_BASE-IF0004/kph_aix526_tema_if0004.tar
- 6.2.2.3-TIV-ITM_HMC_BASE-IF0004/ph_dd.properties
- 6.2.2.3-TIV-ITM_HMC_BASE-IF0004/ph_dd_062203004.xml
- 6.2.2.2-TIV-ITM_HMC_BASE-IF0004/kpk_tems_teps_tepd_if0004.tar
- 6.2.2.2-TIV-ITM_HMC_BASE-IF0004/kpk_tems_teps_tepd_if0004.zip

5.0 Installation instructions
==================
This fix can only be installed over an existing installation. Use
the following steps to install this fix.

5.1 Before installing the fix
------------------------------
- The prerequisites listed under section 3.1 entitled 'Prerequisites
for this fix' must be installed before this fix can be installed.

- For the purpose of this README, the symbol <CANDLEHOME> is the
IBM Tivoli Monitoring installation directory. The default value
for CANDLEHOME is '/opt/IBM/ITM' on UNIX systems and 'C:\IBM\ITM'
on Windows systems.

Before installing this fix on UNIX systems, set the environment
variable CANDLEHOME to the IBM Tivoli Monitoring installation
directory.

For example:
> CANDLEHOME=/opt/IBM/ITM
> export CANDLEHOME

- Because there is no uninstall utility for this fix, make sure to
perform a backup of your environment before installing this fix.

5.2 Local agent update
--------------------------
1. Transfer the appropriate archive file
(6.2.2.3-TIV-ITM_HMC_BASE-IF0004.tar or .zip) to a temporary
directory on the system that contains the agent code to be
updated. For the purpose of this README, the symbol <TEMP>
represents the fully qualified path to this directory. Note: On
Windows systems, this path includes the drive letter.

2. Expand the archive file using the "tar" command on UNIX systems or
an extract utility on Windows systems. This step creates a
directory structure that contains fixes for all of the supported
platforms.

3. Use the "itmpatch" command to install the fix for the operating
system for that agent. For more information on the "itmpatch"
command, see section 6.2.

On UNIX systems, if the fix was expanded to
<TEMP>/6.2.2.3-TIV-ITM_HMC_BASE-IF0004, the install command is:

> itmpatch -h <CANDLEHOME>
-i <TEMP>/6.2.2.3-TIV-ITM_HMC_BASE-IF0004/kph_aix526_tema_if0004.tar

5.3 Remote agent update
----------------------------
1. Transfer the appropriate archive file
(6.2.2.3-TIV-ITM_HMC_BASE-IF0004.tar or .zip) to a temporary
directory on the IBM Tivoli Enterprise Monitoring Server system.
For the purpose of this README, the symbol <TEMP> represents the
fully qualified path to this directory. Note: On Windows systems,
this path includes the drive letter.

2. Expand the archive file using the "tar" command on UNIX systems or
an extract utility on Windows systems. This step creates a
directory structure that contains fixes for all of the supported
platforms.

3. To add the agent fix bundles into the remote deploy depot, use the
"tacmd addBundles" command found in $CANDLEHOME/bin on UNIX systems
or in %CANDLE_HOME%\bin on Windows systems. For more information
on the "tacmd addBundles" command, see the IBM Tivoli Monitoring
Administrator's Guide.

On UNIX systems,
if the fix was expanded to <TEMP>/6.2.2.3-TIV-ITM_HMC_BASE-IF0004:
> $CANDLEHOME/bin/tacmd addBundles -n -i <TEMP>/6.2.2.3-TIV-ITM_HMC_BASE-IF0004

On Windows systems,
if the fix was expanded to <TEMP>\6.2.2.3-TIV-ITM_HMC_BASE-IF0004:
> %CANDLE_HOME%\bin\tacmd addBundles -n -i <TEMP>\6.2.2.3-TIV-ITM_HMC_BASE-IF0004

where:
-n indicates that prerequisite bundles are not automatically
added. The -n parameter must be used because the fix
directory does not contain any prerequisites that the fix
might require. Please see Section 3.1 for the prerequisites
for this fix.
-i is the directory that contains the deployment bundles to be
added to the depot.

4. To log in to the Tivoli Enterprise Monitoring server, and deploy
the fix to the appropriate nodes where the agent is running, use
the following "tacmd" commands. For more information on the
"tacmd login" and "tacmd updateAgent" commands, see the IBM Tivoli
Monitoring Administrator's Guide.

On UNIX systems:
> $CANDLEHOME/bin/tacmd login -s <server>
-u <itmuser>
-p <password>

> $CANDLEHOME/bin/tacmd listSystems

The output shows the Managed System Name for the OS agent on the
remote system to be updated. Use this value as the target of the
"tacmd updateAgent" command.

> $CANDLEHOME/bin/tacmd updateAgent -t ph
-n <Managed system name>
-v 062203004

On Windows systems:
> %CANDLE_HOME%\bin\tacmd login -s <server>
-u <itmuser>
-p <password>

> %CANDLE_HOME%\bin\tacmd listSystems

The output shows the Managed System Name for the OS agent on the
remote system to be updated. Use this value as the target of the
"tacmd updateAgent" command.

> %CANDLE_HOME%\bin\tacmd updateAgent -t PH
-n <Managed system name>
-v 062203004

Note:
- The component (-t) for the "tacmd updateAgent" command is
specified as two characters (PH), not three characters (KPH).
- The node (-n) for the "tacmd updateAgent" command is the managed
system name of the operating system (OS) agent to be updated.
The target node for the "tacmd updateAgent" command is always
an OS agent.

5.4 Agent support update
------------------------------

This fix 6.2.2.2-TIV-ITM_HMC_BASE-IF0004 includes changes to the agent
support files which need to be installed. Use the following steps to
update the Tivoli Enterprise Monitoring Server, Tivoli Enterprise
Portal Server, or Tivoli Enterprise Portal Desktop.

1. Transfer the appropriate archive file
(6.2.2.2-TIV-ITM_HMC_BASE-IF0004.tar or .zip) to the Tivoli
Enterprise Monitoring Servers, Tivoli Enterprise Portal Servers,
or Tivoli Enterprise Portal Desktops.

2. Expand the archive file using the "tar" command on UNIX systems
or an extract utility on Windows systems. This step creates a
directory structure that contains fixes for all of the supported
platforms.

3. Expand the archive file (kph_tems_teps_tepd_if0004.tar or .zip)
that contains the updates for Tivoli Enterprise Monitoring Server,
Tivoli Enterprise Portal Server, and Tivoli Enterprise Portal
Desktop using the "tar" command on UNIX systems or an extract
utility on Windows systems. This step creates a directory
structure that includes a subdirectory called CD-ROM, with the
necessary updates.

4. Use the Application Support Installer(ASI) GUI or the silent
installation method to install the application support files.

Note: For IBM Tivoli Monitoring Version 6.3 or above, one
of the following additional steps must be performed.

1. Acquire a platform-specific pre-packaged JRE version
of the Application Support Installer (ASI). See IBM
Tivoli Monitoring Application Support Installer,
6.2-tiv-itm_asi-if0003 at

http://www.ibm.com/support/docview.wss?uid=swg24034924 [http://www.ibm.com/support/docview.wss?uid=swg24034924]

for download and installation instructions.

-- OR --

2. Specify the '-j javahome' parameter with the path to
a Java(r) 1.5 or java 1.6 installation when running
the itmasi.sh or itmasi.bat script described below.

GUI installation option
------------------------
The GUI can be started by using one of the following commands
from within the CD-ROM directory where setup.jar is located.

On UNIX systems:
> ./itmasi.sh [-h <CANDLEHOME>] [-j <JAVAHOME>]

On Windows systems:
> itmasi [-h <CANDLEHOME>] [-j <JAVAHOME>]

When prompted by the Application Support Installer for the
installable media directory, select the CD-ROM directory, not the
component directory. The installer can install updates for
multiple components at the same time.

Silent installation option
--------------------------
To use the silent installation option, use one of the following
commands from within the CD-ROM directory where setup.jar is
located.

Note: Using the silent installation option for Linux and zLinux
operating systems requires the following files contained in
interim fix 6.2-TIV-ITM_ASI-IF0001:
- Linux: setupLinux.bin
- zLinux: setupLinux390.bin
Follow the installation instructions contained in the
"6.2-TIV-ITM_ASI-IF0001.README".

On UNIX systems:
> ./itmasi.sh -h <CANDLEHOME>[-silent]
[-r <response file>]
[-j <JAVAHOME>]

On Windows systems:
> itmasi -h <CANDLEHOME> [-silent]
[-r <response file>]
[-j <JAVAHOME>]

where:
-h <CANDLEHOME> - Required. The path to the IBM Tivoli
Monitoring installation directory.

-r <response file> - Optional. Customized response file name.
The default response file "response.txt" in
the CD-ROM directory can be copied and modified
for your environment. Do not update "response.txt".

-j <JAVAHOME> - Optional. The fully-qualified path to the "bin"
directory where Java(R) is installed. The
location of Java on your system might vary.

5. The next panel presented by the Application Support Installer asks
for the selection of which Tivoli Monitoring components you want
to add application support to. For this fix, check or clear the
check boxes as follows:

checked - Tivoli Enterprise Monitoring Server (TEMS)
checked - Tivoli Enterprise Portal Server (TEPS)
checked - Tivoli Enterprise Desktop Client (TEPD)

Continue through the remaining GUI panels selecting the HMC Base
06.22.03.04 support to complete the installation.

6. If the Tivoli Enterprise Portal Desktop or Tivoli Enterprise Portal
Browser was running when the update was installed, it must be
restarted.

6.0 Additional installation information
========================

For additional troubleshooting installation information, see the
itmpatch.log in the patchlogs directory in <CANDLEHOME>.

6.1 Installation instructions for agent baroc file
-----------------------------------------------------
This fix 6.2.2.2-TIV-ITM_HMC_BASE-IF0004 includes changes to the
agent baroc files that must be installed. Refer to IBM Tivoli
Monitoring Installation and Setup Guide under "Installing monitoring
agent baroc files on the event server" in "Installing the IBM Tivoli
Enterprise Console Event Synchronization" section for more
information.

6.2 Additional information on using "itmpatch" command
--------------------------------------------------------------
The "itmpatch" command has the following syntax:

Usage: itmpatch -h <installation home> [OPTIONS]

itmpatch -h <installation home>
-t { <patch_file_directory> | <patch_file> }

itmpatch -h <installation home>
-i { <patch_file_directory> | <patch_file> }

where:
-h Specifies the IBM Tivoli Monitoring installation directory
-i Specifies the path to the directory or patch file to be installed
-t Generates a report of the actions to be taken by the patch

For example, on UNIX systems:
- To preview the fix installation, use the "-t" option:
> <CANDLEHOME>/bin/itmpatch -h <CANDLEHOME> -t <TEMP>

- To install the fix, use the "-i" option:
> <CANDLEHOME>/bin/itmpatch -h <CANDLEHOME> -i <TEMP>

where:
<CANDLEHOME> is the fully qualified IBM Tivoli Monitoring
installation directory. On Windows systems, this path must include
the drive letter.
<TEMP> represents the fully qualified directory specification where
the fix is located. On Windows systems, this must include the drive
letter.

6.3 Verifying the update
----------------------------

1. To verify the agent was updated correctly, use the "tacmd" command
to view the agent's current version after the agent is restarted.
You are required to log in to a Tivoli Enterprise Monitoring
Server prior to viewing the agent version.

For example:
On UNIX systems, where $CANDLEHOME is the IBM Tivoli Monitoring
installation directory, the default location is '/opt/IBM/ITM'.

> $CANDLEHOME/bin/tacmd login -s <server>
-u <itmuser>
-p <password>
> $CANDLEHOME/bin/tacmd listSystems -t PH

On Windows systems, where %CANDLE_HOME% is the IBM Tivoli
Monitoring installation directory, the default location
is 'C:\IBM\ITM'.

> %CANDLE_HOME%\bin\tacmd login -s <server>
-u <itmuser>
-p <password>

> %CANDLE_HOME%\bin\tacmd listSystems -t PH

Note: The component (-t) for the "tacmd listSystems" command is
specified as two characters (PH), not three characters (KPH).

When the agent update is successful, the agent version is:
06.22.03.04.

2. To verify the agent support files were updated correctly, use the
"kincinfo" command on Windows systems or the "cinfo" command on
Linux or UNIX systems. The sample output below shows the versions
of the Tivoli Enterprise Portal Server, Tivoli Enterprise
Monitoring Server, or Tivoli Enterprise Portal Desktop systems
after this fix has been successfully applied.

Note: The displayed date of the build might not be accurate. This
is a known problem.

On UNIX or Linux systems:
-------------------------
To validate that all components have been installed, run the
following command:

./cinfo -i

*********** Thu Oct 7 13:57:24 CST 2015 ******************
User: root Groups: system bin sys security cron audit lp
Host name : <hostname> Installer Lvl:06.30.02.00
CandleHome: /opt/IBM/ITM
***********************************************************
...Product inventory
.
.
.
ph Monitoring Agent for HMC Base
tms Version: 06.22.03.04
tps Version: 06.22.03.04
tpw Version: 06.22.03.00
.
.
.

On Windows systems:
---------------------
To validate that all components have been installed, run the
following command:

For example:
> %CANDLE_HOME%\InstallITM\kincinfo -i

{Add your sample output here}
*********** Thu Oct 7 16:03:55 Eastern Standard Time 2015 **********
User : Administrator Group : NA
Host Name : <hostname> Installer: Ver: 062204000
CandleHome: C:\IBM\ITM
Installitm: C:\IBM\ITM\InstallITM
*********************************************************************
.
.
.
PH Monitoring Agent for HMC Base Support
WINNT Version: 06.22.03.04 Build: 201510070000

PH Monitoring Agent for HMC Base Support
WINNT Version: 06.22.03.04 Build: 201510070000

PH Monitoring Agent for HMC Base Support
WINNT Version: 06.22.03.04 Build: 201510070000
.
.
.

7.0 Known problems and workarounds
=========================
None.

8.0 Additional product information
======================
None.

9.0 Copyright and trademark information
==================================
A current list of IBM trademarks is available on the Web at "Copyright
and trademark information" at www.ibm.com/legal/copytrade.shtml.

10.0 Notices
=======
INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION
"AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Some jurisdictions do not allow disclaimer of express or implied
warranties in certain transactions, therefore, this statement may not
apply to you.

This information could include technical inaccuracies or typographical
errors. Changes are periodically made to the information herein; these
changes will be incorporated in new editions of the publication. IBM
may make improvements and/or changes in the product(s) and/or the
program(s) described in this publication at any time without notice.

Microsoft, Windows, and Windows Server are trademarks of Microsoft
Corporation in the United States, other countries, or both.

Java and all Java-based trademarks are trademarks of Sun Microsystems,
Inc. in the United States, other countries, or both.

UNIX is a registered trademark of The Open Group in the United States
and other countries.

Other company, product, or service names may be trademarks or service
marks of others.

Third-Party License Terms and Conditions, Notices and Information
-----------------------------------------------------------------
The license agreement for this product refers you to this file for
details concerning terms and conditions applicable to third party
software code included in this product, and for certain notices and
other information IBM must provide to you under its license to
certain software code. The relevant terms and conditions, notices and
other information are provided or referenced below. Please note that
any non-English version of the licenses below is unofficial and is
provided to you for your convenience only. The English version of the
licenses below, provided as part of the English version of this file,
is the official version.

Notwithstanding the terms and conditions of any other agreement you
may have with IBM or any of its related or affiliated entities
(collectively "IBM"), the third party software code identified below
are "Excluded Components" and are subject to the following terms and
conditions:

- the Excluded Components are provided on an "AS IS" basis
- IBM DISCLAIMS ANY AND ALL EXPRESS AND IMPLIED WARRANTIES AND
CONDITIONS WITH RESPECT TO THE EXCLUDED COMPONENTS, INCLUDING, BUT
NOT LIMITED TO, THE WARRANTY OF NON-INFRINGEMENT OR INTERFERENCE
AND THE IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE
- IBM will not be liable to you or indemnify you for any claims
related to the Excluded Components
- IBM will not be liable for any direct, indirect, incidental,
special, exemplary, punitive or consequential damages with respect
to the Excluded Components.

PREREQUISITES
IBM Tivoli Monitoring: HMC Base Agent, Version 6.2.2 Interim Feature 3

INSTALLATION INSTRUCTIONS
Please refer to the README contained in the Description section above for general installation instructions.

DOWNLOAD PACKAGE

Download RELEASE DATE LANGUAGE SIZE(Bytes) Download Options
What is Fix Central(FC)? [https://www.ibm.com/support/fixcentral/help?page=swfaqs] 6.2.2.3-TIV-ITM_HMC_BASE-IF0004 18 May 2016 English 35850104 FC [http://www.ibm.com/support/fixcentral/quickorder?fixids=6.2.2.3-TIV-ITM_HMC_BASE-IF0004&product=ibm%2FTivoli%2FIBM+Tivoli+Monitoring&source=dbluesearch&platform=All] [ ]
PRODUCT ALIAS/SYNONYM
 HMC Agent
Monitoring Agent for System P
System P Agent

 [/support/docview.wss?uid=swg24042283&aid=1]Problems (APARS) fixed [/support/docview.wss?uid=swg24042283&aid=2]Problems (APARS) fixed
IV47101, IV50134, IV50135, IV50686, IV60709, IV67769

Question: Is it possible to monitor Memory/LPAR metrics using ITM HMC agent? I understand the ITM AIX Premium agent captures these metrics but like to know if it is possible to monitor Memory/LPAR metrics using ITM HMC agent?

Answer:
6.2.2.3-TIV-ITM_HMC_BASE-IF0002
---------------------------------
Feature: 208626
Abstract: LPAR Memory Attributes
Additional information: The following new attributes are added in
the Server LPARs attribute group:

Current_Memory - The current amount of memory, in megabytes,
configured for the LPAR.
Warehouse name: CM0
Running_Memory - The amount of memory, in megabytes, varied on-line
by the LPAR.
Warehouse name: RM

In order to display these new attributes in the Tivoli Enterprise
Portal, use the Query Editor and select Server LPARs_V9 under
KPH SERVER LPARS.


IBM Announcement: End of Support for WebSphere MQ and WebSphere MQ File Transfer Edition V7.0.1 and V7.0.0 and WebSphere MQ Telemetry V7.0.1 - United States  NEWS

ABSTRACT
 IBM has withdrawn support for WebSphere MQ V7.0.1 and V7.0.0, WebSphere MQ for z/OS V7.0.1 and V7.0.0, WebSphere MQ File Transfer Edition V7.0.1 and V7.0.0, WebSphere MQ File Transfer Edition for z/OS V7.0.1 and V7.0.0, and WebSphere MQ Telemetry V7.0.1.

CONTENT

TAB NAVIGATION
 * WebSphere MQ and File Transfer Edition V7.0.1 and V7.0.0 • MQ Telemetry V7.0.1 selected tab

TAB NAVIGATION
 * What were the end of support dates for WebSphere MQ V7.0.1 and V7.0.0, WebSphere MQ File Transfer Edition V7.0.1 and V7.0.0, and WebSphere MQ Telemetry V7.0.1?
 * Do these announcements affect WebSphere MQ File Transfer Edition V7.0.4, V7.0.3 and V7.0.2, WebSphere MQ Advanced Message Security V7.0.1, or WebSphere MQ Hypervisor Edition V7.0.1?
 * What replacement products are available?
 * How do I check which version I am currently running?
 * Is any information available to help me upgrade to a later version?
 * How do I purchase a support extension for my current version?
 * When a WebSphere MQ server product goes out of support, does the client and file transfer agent also go out of support?
 * Are these products still supported when they are bundled with another IBM product?
 * Is the WebSphere MQ V7.0 Resource Adapter supported in WebSphere Application Server?
 * Is documentation still available for these products?
 * How do I obtain installation images for these products if I still need them?
 * Is there an IBM MQ V9.0 or MQ V8.0 trial version available for download?

[/support/docview.wss?uid=swg21674407&aid=1]

WHAT ARE THE END OF SUPPORT DATES FOR WEBSPHERE MQ V7.0.1 AND V7.0.0, WEBSPHERE MQ FILE TRANSFER EDITION V7.0.1 AND V7.0.0, AND WEBSPHERE MQ TELEMETRY V7.0.1?

 *
 *  Product Version Release Date End of Support Platforms WebSphere MQ V7.0.1 28 Aug 2009 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS209-245] 30 Apr 2015 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS914-067] AIX, HP-UX (Itanium), HP-UX (PA-RISC), i5/OS, Linux (POWER), Linux (x86), Linux (x86-64), Linux (zSeries 64-bit), Solaris (SPARC), Solaris (x86-64), Windows (x86) WebSphere MQ for z/OS V7.0.1 25 Sep 2009 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS209-248] 30 Sep 2015 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS914-150] z/OS WebSphere MQ V7.0.0 16 Jun 2008 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS208-068] 30 Apr 2015 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS914-067] AIX, HP-UX (Itanium), HP-UX (PA-RISC), i5/OS, Linux (POWER), Linux (x86), Linux (x86-64), Linux (zSeries 64-bit), Solaris (SPARC), Solaris (x86-64), Windows (x86) WebSphere MQ for z/OS V7.0.0 27 Jun 2008 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS208-067] 30 Sep 2011 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS910-014] z/OS WebSphere MQ File Transfer Edition V7.0.1 05 Jun 2009 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS209-118] 30 Sep 2014 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS913-158] AIX, HP-UX (Itanium), Linux (x86), Linux (x86-64), Linux (zSeries 64-bit), Solaris (SPARC), Windows (x86) WebSphere MQ File Transfer Edition for z/OS V7.0.1 12 Jun 2009 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS209-119] 30 Sep 2014 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS913-149] z/OS WebSphere MQ File Transfer Edition V7.0.0 05 Dec 2008 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS208-331] 30 Sep 2014 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS913-158] AIX, HP-UX (Itanium), Linux (x86), Solaris (SPARC), Windows (x86) WebSphere MQ File Transfer Edition for z/OS V7.0.0 12 Dec 2008 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS208-339] 30 Sep 2014 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS913-149] z/OS WebSphere MQ Telemetry V7.0.1 27 Aug 2010 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS210-201] 30 Sep 2015 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS914-067] Linux (x86-64), Windows (x86)
 *
 *  Review lifecycle dates for all IBM MQ and WebSphere MQ products [http://www.ibm.com/software/support/lifecycleapp/PLCSearch.wss?q=%28+%22IBM+MQ%22+OR+%22WebSphere+MQ%22+%29+AND+NOT+%28+Tivoli+OR+Adapter+OR+Broker+OR+Integrator+OR+Workflow+OR+%22Low+Latency+Messaging%22+%29]

   End of support information for WebSphere MQ V7.5 and WebSphere MQ Hypervisor Edition V7.5 [http://www.ibm.com/support/docview.wss?&uid=swg21996472]

   End of support information for WebSphere MQ V7.1, WebSphere MQ File Transfer Edition V7.0.4, V7.0.3 and V7.0.2, WebSphere MQ Advanced Message Security V7.0.1, and WebSphere MQ Hypervisor Edition V7.0.1 [http://www.ibm.com/support/docview.wss?&uid=swg21980668]

 * Back to top

DO THESE ANNOUNCEMENTS AFFECT WEBSPHERE MQ FILE TRANSFER EDITION V7.0.4, V7.0.3 AND V7.0.2, WEBSPHERE MQ ADVANCED MESSAGE SECURITY V7.0.1, OR WEBSPHERE MQ HYPERVISOR EDITION V7.0.1?

 * IBM has subsequently announced the end of support for these products [http://www.ibm.com/support/docview.wss?uid=swg21980668] on all platforms including z/OS:
 *
 *  Lifecycle dates for WebSphere MQ V7.0 products [http://www.ibm.com/software/support/lifecycleapp/PLCSearch.wss?q=%28%22WebSphere+MQ+%22+AND+%227.0%22%29+OR+%28%22WebSphere+MQ+File+Transfer+Edition+%22+AND+%28%227.0.4%22+OR+%227.0.3%22+OR+%227.0.2%22%29%29+OR+%28%22WebSphere+MQ+Advanced+Message+Security+%22+AND+%227.0.1%22%29]
 *
 * Back to top

WHAT REPLACEMENT PRODUCTS ARE AVAILABLE?

 * Replacements for WebSphere MQ V7.0.1 and V7.0.0 include IBM MQ or IBM MQ Advanced V9.0 and V8.0. WebSphere MQ or WebSphere MQ Advanced V7.5 are also available (except on IBM i), but their end of support date is 30 Apri 2018 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS916-117].
 * Replacements for WebSphere MQ for z/OS V7.0.1 and V7.0.0 include IBM MQ, IBM MQ Advanced, or IBM MQ Value Unit Edition for z/OS V9.0 and V8.0.0.
 * Replacements for WebSphere MQ File Transfer Edition V7.0.1 and V7.0.0 include IBM MQ Advanced V9.0 and V8.0. WebSphere MQ Advanced V7.5 is also available (except on IBM i), but its end of support date is 30 April 2018 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS916-117]. The Advanced license allows use of the Managed File Transfer and Advanced Message Security components which are now built into MQ and replace the former File Transfer Edition and Advanced Message Security products.
 * Replacements for WebSphere MQ File Transfer Edition for z/OS V7.0.1 and V7.0.0 include IBM MQ Advanced for z/OS V9.0 and V8.0.0. The Advanced license allows use of the Managed File Transfer and Advanced Message Security components which are now built into MQ for z/OS and replace the former File Transfer Edition for z/OS and Advanced Message Security for z/OS products.
 * The replacement for WebSphere MQ Telemetry V7.0.1 is IBM MQ or IBM MQ Advanced V9.0 or V8.0, all of which include Telemetry as a component of the MQ product. WebSphere MQ or WebSphere MQ Advanced V7.5 are also available (except on IBM i), but their end of support date is 30 April 2018 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS916-117].
 *
 *
 * Back to top

HOW DO I CHECK WHICH VERSION I AM CURRENTLY RUNNING?

 * Follow these general instructions [http://www.ibm.com/support/docview.wss?uid=swg21621707] or the IBM MQ Knowledge Center instructions [http://www.ibm.com/support/knowledgecenter/SSFKSJ_9.0.0/com.ibm.mq.ref.adm.doc/q083280_.htm] to display your IBM MQ or WebSphere MQ version on all platforms except for z/OS with the command: dspmqver
 * On z/OS, look for message CSQY000I [http://www.ibm.com/support/knowledgecenter/SSFKSJ_9.0.0/com.ibm.mq.ref.doc/csq_y.htm] in the MSTR joblog to determine your version.
 * Follow the IBM MQ Knowledge Center instructions [http://www.ibm.com/support/knowledgecenter/SSFKSJ_9.0.0/com.ibm.wmqfte.doc/display_ver_cmd.htm] to display your Managed File Transfer or WebSphere MQ File Transfer Edition version with the command: fteDisplayVersion
 * WebSphere MQ Telemetry V7.0.1 only runs on WebSphere MQ V7.0.1 (fix pack 7.0.1.3 and later) on Linux (x86-64) and Windows (x86). Although there is no command to display the WebSphere MQ Telemetry version, if your WebSphere MQ version is V7.0.1 and you have a WebSphere MQ Telemetry service and channels [http://www.ibm.com/support/knowledgecenter/SSFKSJ_7.0.1/com.ibm.mq.tt.doc/tt_intro.htm] configured, then you are running WebSphere MQ Telemetry V7.0.1.
 *
 * Back to top

[/support/docview.wss?uid=swg21674407&aid=2]

IS ANY INFORMATION AVAILABLE TO HELP ME UPGRADE TO A LATER VERSION?

 * The IBM MQ and WebSphere MQ Migration Guide [https://www.ibm.com/developerworks/community/blogs/aimsupport/entry/websphere_mq_ibm_mq_migration_guide] is available to view online or download:
 *  IBM MQ and WebSphere MQ Migration Guide [https://www.ibm.com/developerworks/community/blogs/aimsupport/resource/MQ_migration/WMQ_Migration.pdf]
 *
 * The IBM Knowledge Center also includes information to assist you in migrating to a supported version of IBM MQ or WebSphere MQ:
 *  Migrating and upgrading to IBM MQ V9.0 [http://www.ibm.com/support/knowledgecenter/SSFKSJ_9.0.0/com.ibm.mq.mig.doc/q006180_.htm] Migrating and upgrading to IBM MQ V8.0 [http://www.ibm.com/support/knowledgecenter/SSFKSJ_8.0.0/com.ibm.mq.mig.doc/q006180_.htm] Migrating and upgrading to WebSphere MQ V7.5 [http://www.ibm.com/support/knowledgecenter/SSFKSJ_7.5.0/com.ibm.mq.mig.doc/q006180_.htm]
 *
 * The following WebSphere Support Technical Exchange presentations may be helpful if you are considering running multiple MQ installations on your system:
 *  Webcast replay: WebSphere MQ Multi-Version - First Steps [http://www.ibm.com/support/docview.wss?uid=swg27024276] Webcast replay: WebSphere MQ Multi-Version - Environment Considerations and Management [http://www.ibm.com/support/docview.wss?uid=swg27024340]
 *
 * Back to top

HOW DO I PURCHASE A SUPPORT EXTENSION FOR MY CURRENT VERSION?

 * Support extensions are available for an additional fee. To purchase extended support for WebSphere MQ or any of the other products, please contact your local IBM sales representative.
 * US Customers should contact Customer Support Operations at 1-877-426-6006, option #2. If you provide your IBM customer number, they can quickly find your sales representative.
 * Customers in other geographies should refer to the IBM directory of worldwide support contacts to find sales contact numbers in your region:
 *
 *  IBM Directory of Worldwide Contacts [http://www.ibm.com/planetwide/]
 *
 * Back to top

WHEN AN WEBSPHERE MQ SERVER PRODUCT GOES OUT OF SUPPORT, DOES THE CLIENT AND FILE TRANSFER AGENT ALSO GO OUT OF SUPPORT?

 * Yes. WebSphere MQ V7.0 clients and WebSphere MQ File Transfer Edition V7.0.1 and V7.0.0 agents go out of support at the same time as the server.
 *
 * Back to top

 [/support/docview.wss?uid=swg21674407&aid=3]

ARE THESE PRODUCTS STILL SUPPORTED WHEN THEY ARE BUNDLED WITH ANOTHER IBM PRODUCT?

 * Yes, support is available for all bundled components until the IBM product that includes them is withdrawn from support. However, they are only supported when used by the bundling IBM product. Unrelated usage is not supported.
 *
 *  Find the end of support date for your IBM software product [http://www.ibm.com/software/support/lifecycle/index_a_z.html]
 *
 * Back to top

IS THE WEBSPHERE MQ V7.0 RESOURCE ADAPTER SUPPORTED IN WEBSPHERE APPLICATION SERVER?

 * Yes, the WebSphere MQ V7.0 Resource Adapter [http://www.ibm.com/support/docview.wss?uid=swg21248089#7dotx_0] shipped with WebSphere Application Server V8.0 and V7.0 is supported through 30 April 2018 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS916-143], when both of those versions of WebSphere Application Server end support, or longer if you purchase a WebSphere Application Server support extension.

 * Similarly, the WebSphere MQ V7.1 Resource Adapter [http://www.ibm.com/support/docview.wss?uid=swg21248089#7dotx_0_0] shipped with WebSphere Application Server V8.5.x is supported as long as that version of WebSphere Application Server remains in support, or longer if you purchase a WebSphere Application Server support extension.

 * However, if you manually install your own copy of the WebSphere MQ V7.x Resource Adapter in WebSphere Application Server or any third-party Java EE server, it will go out of support with the corresponding WebSphere MQ server version.

 * The IBM MQ V8.0 and V9.0 Resource Adapters cannot be installed in WebSphere Application Server V8.5.x, V8.0 and V7.0 because those versions support JMS 1.1 while the IBM MQ Resource Adapters implement JMS 2.0. WebSphere Application Server V9.0 ships with the IBM MQ V9.0 Resource Adapter [http://www.ibm.com/support/docview.wss?uid=swg21248089#7dotx_0_0_0] and includes full support for JMS 2.0. The version of MQ Resource Adapter you use must be supported by your Java EE server but does not need to match the version of the queue managers to which you wish to connect.

 * Back to top

IS DOCUMENTATION STILL AVAILABLE FOR THESE PRODUCTS?

 * Yes. Online documentation is available in the IBM Knowledge Center, while downloadable Information Center installations and PDF versions of the manuals are available from the MQ Library page.
 *
 *  WebSphere MQ V7.0.1 Knowledge Center [http://www.ibm.com/support/knowledgecenter/SSFKSJ_7.0.1/com.ibm.mq.helphome.v70.doc/WelcomePagev7r0.htm] WebSphere MQ V7.0.1 library of downloadable documentation [http://www.ibm.com/software/integration/wmq/library/library701.html] WebSphere MQ V7.0.0 library of downloadable documentation [http://www.ibm.com/software/integration/wmq/library/library700.html] WebSphere MQ File Transfer Edition V7.0.4 Knowledge Center [http://www.ibm.com/support/knowledgecenter/SSEP7X_7.0.4/welcome/WelcomePagev7r0.html] WebSphere MQ Telemetry V7.0.1 [http://www.ibm.com/support/knowledgecenter/SSFKSJ_7.0.1/com.ibm.mq.tt.doc/tt_intro.htm]
 *
 * Back to top

HOW DO I OBTAIN INSTALLATION IMAGES FOR THESE PRODUCTS IF I STILL NEED THEM?

 * Installation images for WebSphere MQ V7.0.1 and V7.0.0, WebSphere MQ File Transfer Edition V7.0.1 and V7.0.0, and WebSphere MQ Telemetry V7.0.1 are no longer available from Passport Advantage [https://www.ibm.com/software/passportadvantage/pao_customer.html]. Contact IBM if you have an urgent business need for these installation images.
 *
 * Back to top

[/support/docview.wss?uid=swg21674407&aid=4]

IS THERE AN IBM MQ V9.0 OR MQ V8.0 TRIAL VERSION AVAILABLE FOR DOWNLOAD?

 * You can obtain a full-featured trial version of IBM MQ to evaluate for 90 days:
 *
 *  Try IBM MQ now [https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?pkgid=&S_SRCID=ESD-WSMQ-EVAL&source=ESD-WSMQ-EVAL&S_TACT=109J84RW&S_CMP=web_ibm_ws_appint_ct_wmq-ov&S_PKG=CR9H9ML&s=&id=2009-08-28+03%3A34%3A46.648052R&fam=&cat=&l=English+International&m=download&ibm-continue=Continue]
 *
 * Back to top

Cross reference information Segment Product Component Platform Version Edition Business Integration WebSphere MQ File Transfer Edition Not Applicable AIX, HP-UX, Linux, Solaris, Windows, z/OS 7.0.1, 7.0 All Editions Business Integration WebSphere MQ Telemetry Not Applicable Linux, Windows Business Integration IBM MQ
PRODUCT ALIAS/SYNONYM
 WebSphere MQ WMQ

Question: Is MQ V7.0.1 is going out of support? When is the last date of support?

Answer: Product Version Release Date End of Support Platforms WebSphere MQ V7.0.1 28 Aug 2009 [https://www.ibm.com/common/ssi/cgi-bin/ssialias?subtype=ca&infotype=an&appname=iSource&supplier=897&letternum=ENUS209-245] 30 Apr 2015


IBM Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Image Construction and CompositionTool. (CVE-2015-4000) - United States  SECURITY BULLETIN

SUMMARY
 The Logjam Attack on TLS connections using the Diffie-Hellman (DH) key exchange protocol affects IBM Image Construction and Composition Tool.

VULNERABILITY DETAILS
CVEID: CVE-2015-4000 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000]
DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey a DHE_EXPORT ciphersuite choice. An attacker could exploit this vulnerability using man-in-the-middle techniques to force a downgrade to 512-bit export-grade cipher. Successful exploitation could allow an attacker to recover the session key as well as modify the contents of the traffic. This vulnerability is commonly referred to as "Logjam".
CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/103294 [https://exchange.xforce.ibmcloud.com/vulnerabilities/103294] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:N/A:N)

AFFECTED PRODUCTS AND VERSIONS
IBM Image Construction and Composition Tool v2.2.1.3
IBM Image Construction and Composition Tool v2.3.1.0
IBM Image Construction and Composition Tool v2.3.2.0

REMEDIATION/FIXES
The solution is to apply the following IBM Image Construction and Composition Tool version fixes.

Upgrade the IBM Image Construction and Composition Tool to the following fix levels:

· For IBM Image Construction and Composition Tool v2.2.1.3
· IBM Image Construction and Composition Tool v2.2.1.3 Build 32

http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=1.1.0.5&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.2.1.3-32&includeSupersedes=0 [http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=1.1.0.5&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.2.1.3-32&includeSupersedes=0]

· For IBM Image Construction and Composition Tool v2.3.1.0
· IBM Image Construction and Composition Tool v2.3.1.0 Build 43

http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=2.0.0.1&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.3.1.0-43&includeSupersedes=0 [http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=2.0.0.1&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.3.1.0-43&includeSupersedes=0]

· For IBM Image Construction and Composition Tool v2.3.2.0
· IBM Image Construction and Composition Tool v2.3.2.0 Build 16

http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=2.1.0.0&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.3.2.0-16&includeSupersedes=0 [http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=2.1.0.0&platform=All&function=fixId&fixids=ICCT_efix_Repository_2.3.2.0-16&includeSupersedes=0]

You should verify applying this configuration change does not cause any compatibility issues. If you change the default setting after applying the fix, you will expose yourself to the attack described above. IBM recommends that you review your entire environment to identify other areas where you have enabled the Diffie-Hellman key-exchange protocol used in TLS and take appropriate mitigation and remediation actions.

WORKAROUNDS AND MITIGATIONS
None

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v2 Guide [http://www.first.org/cvss/v2/guide]
On-line Calculator v2 [http://nvd.nist.gov/CVSS-v2-Calculator]
RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt] ACKNOWLEDGEMENT
Reported to IBM by The WeakDH team at https://weakdh.org [https://weakdh.org]

CHANGE HISTORY
 18 August 2015: Original Version Published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Question: Help with Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Image Construction and CompositionTool. (CVE-2015-4000) I need to understand details regarding "Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Image Construction and CompositionTool. (CVE-2015-4000". Where can I find this information?

Answer:
CVEID: CVE-2015-4000 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4000]
DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey a DHE_EXPORT ciphersuite choice. An attacker could exploit this vulnerability using man-in-the-middle techniques to force a downgrade to 512-bit export-grade cipher. Successful exploitation could allow an attacker to recover the session key as well as modify the contents of the traffic. This vulnerability is commonly referred to as "Logjam".
CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/103294 [https://exchange.xforce.ibmcloud.com/vulnerabilities/103294] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:N/A:N)


IBM Integration Bus Healthcare Pack V4.0 release notes - United States  RELEASE NOTES

ABSTRACT
 This document contains the release notes for IBM Integration Bus Healthcare Pack V4.0, including the tooling and runtime components.

CONTENT
Release notes file for: IBM Integration Bus Healthcare Pack
Product Release: 4.0
Update name: 4.0.0.0
Versions and fix packs:
* V4.0.0.0 (electronic availability: 25 June 2015)
Document first published: 25 June 2015
Document last modified: 25 June 2015

Contents

 * Download location
 * Installation information:  * Prior to installation
    * Installing
    * Documentation
    * Support
    * Feature updates

 * Additional information
 * Known problems and their workarounds (if any):  * Installation
    * IBM Integration Toolkit

 * Copyright and trademark information
 * Useful websites

Download location Download IBM Integration Bus Healthcare Pack V4.0 using the following instructions:
http://www.ibm.com/support/docview.wss?uid=swg24040117 [http://www.ibm.com/support/docview.wss?uid=swg24040117]

Installation information

Always use the latest version of this release notes file, which is available in English only at:
http://www.ibm.com/support/docview.wss?uid=swg27006917 [http://www.ibm.com/support/docview.wss?uid=swg27006917]

Translated release notes files are available at:
ftp://public.dhe.ibm.com/software/integration/integrationbus/docs/healthcare/V4.0/ [ftp://public.dhe.ibm.com/software/integration/integrationbus/docs/healthcare/V4.0/]

Prior to installation

For information about the tasks you must complete before you install the product, refer to the IBM Integration Bus Healthcare Pack product documentation at:
http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha00090.htm [http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha00090.htm]

Installing

Installation information is available in the IBM Integration Bus Healthcare Pack product documentation at:
http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha00090.htm [http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha00090.htm]

Documentation The online product documentation for IBM Integration Bus Healthcare Pack is available at:
http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha00000.htm [http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha00000.htm]

Always refer to the online product documentation for the latest information.

The stand-alone product documentation is available for download at:
ftp://public.dhe.ibm.com/software/integration/integrationbus/docs/healthcare/V4.0/iib_healthcare_help.zip [ftp://public.dhe.ibm.com/software/integration/integrationbus/docs/healthcare/V4.0/iib_healthcare_help.zip] (Windows and Linux (x86-64) version)

Read the How to add the Healthcare plug-in to a help system.txt file that is included in the iib_healthcare_help.zip file.

Support Defects: This release notes file might contain references to defect numbers. These numbers refer to internal IBM problem numbers; you might find these numbers useful when discussing problems with your IBM service representative.

Technotes: For current information about known problems and available fixes, see the IBM Integration Bus support website at:
http://www.ibm.com/support/entry/portal/Software/WebSphere/WebSphere_Message_Broker [http://www.ibm.com/support/entry/portal/Software/WebSphere/WebSphere_Message_Broker]
To find information, click Troubleshooting documentation. IBM Integration Bus and IBM Integration Bus Healthcare Pack Technotes are displayed and can be ordered and searched.

For information about downloading IBM Integration Bus Healthcare Pack V4.0 installation images from the Passport Advantage website, see the Accessing the Installer topic in the IBM Integration Bus product documentation, which is available at:
http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha03080.htm [http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha03080.htm]

Versions: For the latest information about which particular versions of operating systems are supported by IBM Integration Bus Healthcare Pack, see the system requirements page at:
http://www.ibm.com/software/integration/wbimessagebroker/requirements/index.html [http://www.ibm.com/software/integration/wbimessagebroker/requirements/index.html]

Feature updates Check periodically for updates to the toolkit, including documentation updates in English and in other supported languages. Recommended fixes for IBM Integration Bus Healthcare Pack can be found at:
http://www.ibm.com/support/docview.wss?uid=swg27006041 [http://www.ibm.com/support/docview.wss?uid=swg27006041]

TOP Additional information
Known problems and their workarounds (if any): This section outlines the known problems and their workarounds (if any) of the IBM Integration Bus Healthcare Pack, by component.

TOP Installation
 * Installation of IBM Integration Bus Healthcare Pack V4.0.0.0 on computers that have a previous version installed is not supported To install IBM Integration Bus Healthcare Pack V4.0.0.0 you must first remove any existing installations of the IBM Integration Bus Healthcare Pack or IBM WebSphere Message Broker Connectivity Pack for Healthcare.

TOP IBM Integration Toolkit
 * HL7® FHIR® Draft Standard for Trial Use The HL7® FHIR® standard is used in the Healthcare: FHIR transformation pattern. The standard is a Draft Standard for Trial Use (DSTU), rather than a full normative specification.

TOP Copyright and trademark information
http://www.ibm.com/legal/copytrade.shtml [http://www.ibm.com/legal/copytrade.shtml]

This information was developed for products and services offered in the U.S.A.

IBM may not offer the products, services, or features discussed in this information in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matter described in this information. The furnishing of this information does not give you any license to these patents. You can send license inquiries, in writing, to:

 *
 *
 *
 *
 *
 *
 *
 *
 *

For license inquiries regarding double-byte character set (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to:  *
 *
 *
 *
 *
 *
 *

The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the information. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this information at any time without notice.

Any references in this information to non-IBM Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk.

IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

 *
 *
 *
 *
 *
 *
 *
 *
 *
 *
 *
 *
 *

Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee. The licensed program described in this information and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Programming License Agreement, or any equivalent agreement between us.

Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.

This information includes examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental.

COPYRIGHT LICENSE:

This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. You may copy, modify, and distribute these sample programs in any form without payment to IBM for the purposes of developing, using, marketing, or distributing application programs conforming to IBM's application programming interfaces.

The following terms are trademarks of International Business Machines Corporation in the United States, other countries, or both:

AIX, developerWorks, IBM, Passport Advantage, WebSphere.

Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates in the United States, other countries, or both

Microsoft and Windows are trademarks of Microsoft Corporation in the United States, other countries, or both.

UNIX is a registered trademark of The Open Group in the United States and other countries.

Linux is a trademark of Linus Torvalds in the United States, other countries, or both.

Other company, product or service names might be trademarks or service marks of others.

TOP Useful websites IBM Integration Bus product page
http://www.ibm.com/software/products/us/en/ibm-integration-bus/ [http://www.ibm.com/software/products/us/en/ibm-integration-bus]

WebSphere MQ Fix Packs
http://www.ibm.com/support/entry/portal/Software/WebSphere/WebSphere_MQ [http://www.ibm.com/support/entry/portal/Software/WebSphere/WebSphere_MQ]

IBM Integration Bus Fix Packs
http://www.ibm.com/support/docview.wss?uid=swg27006041 [http://www.ibm.com/support/docview.wss?uid=swg27006041]

IBM Integration Bus Requirements
http://www.ibm.com/software/integration/wbimessagebroker/requirements/ [http://www.ibm.com/software/integration/wbimessagebroker/requirements/]

IBM Integration Bus release notes and readme files
http://www.ibm.com/support/docview.wss?uid=swg27006917 [http://www.ibm.com/support/docview.wss?uid=swg27006917]

IBM Integration Bus V10.0 stand-alone product documentation
For Linux:
ftp://public.dhe.ibm.com/software/integration/integrationbus/docs/V10.0/ib_help_linux.tgz [ftp://public.dhe.ibm.com/software/integration/integrationbus/docs/V10.0/ib_help_linux.tgz]
For Windows:
ftp://public.dhe.ibm.com/software/integration/integrationbus/docs/V10.0/ib_help_win.zip [ftp://public.dhe.ibm.com/software/integration/integrationbus/docs/V10.0/ib_help_win.zip]

IBM Integration Bus Healthcare Pack V4.0 online product documentation
http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha00000.htm [http://www.ibm.com/support/knowledgecenter/SSMKHH_10.0.0/com.ibm.healthcare.doc/ha00000.htm]

IBM Centre for Java™ Technology Development Downloads
http://www.ibm.com/developerworks/java/jdk/ [http://www.ibm.com/developerworks/java/jdk/]

IBM Integration Bus developerWorks Zone
http://www.ibm.com/developerworks/websphere/zones/businessintegration/wmb.html [http://www.ibm.com/developerworks/websphere/zones/businessintegration/wmb.html]

IBM Messaging blog
https://www.ibm.com/developerworks/mydeveloperworks/blogs/c565c720-fe84-4f63- 873f-607d87787327 [https://www.ibm.com/developerworks/mydeveloperworks/blogs/c565c720-fe84-4f63-873f-607d87787327]

TOP (C) Copyright IBM Corporation 2015. All rights reserved.

COPYRIGHT DATE
 2015

ORIGINAL PUBLICATION DATE
 2015/6/25

PRODUCT ALIAS/SYNONYM
 IIB IBMIB

Question: Where can I find information on the Integration Bus Healthcare Pack? Where can I find information about the Integration Bus Healthcare Pack V4.0?

Answer:
Release notes file for: IBM Integration Bus Healthcare Pack
Product Release: 4.0
Update name: 4.0.0.0
Versions and fix packs:
* V4.0.0.0 (electronic availability: 25 June 2015)
Document first published: 25 June 2015
Document last modified: 25 June 2015


IBM Security Bulletin: Multiple vulnerabilities in Node.js affect IBM API Connect (CVE-2017-1000381, CVE-2017-11499) - United States  SECURITY BULLETIN

SUMMARY
 IBM API Connect has addressed Node.js vulnerabilities involving access to sensitive information and potential denial of service.

VULNERABILITY DETAILS

CVEID:CVE-2017-1000381 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000381]
DESCRIPTION:c-ares could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the ares_parse_naptr_reply() function when parsing NAPTR responses. By sending specially crafted DNS response packet, an attacker could exploit this vulnerability to read memory outside of the given input buffer and cause a denial of service.
CVSS Base Score: 6.5
CVSS Temporal Score: Seehttps://exchange.xforce.ibmcloud.com/vulnerabilities/128625 [https://exchange.xforce.ibmcloud.com/vulnerabilities/128625]for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)

CVEID:CVE-2017-11499 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11499]
DESCRIPTION:Node.js is vulnerable to a denial of service, caused by a flaw related to constant HashTable seeds. A remote attacker could exploit this vulnerability to flood the hash and cause a denial of service.
CVSS Base Score: 7.5
CVSS Temporal Score: Seehttps://exchange.xforce.ibmcloud.com/vulnerabilities/129465 [https://exchange.xforce.ibmcloud.com/vulnerabilities/129465]for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

AFFECTED PRODUCTS AND VERSIONS

Affected IBM API Management Affected Versions IBM API Connect 5.0.0.0-5.0.6.4 IBM API Connect 5.0.7.0-5.0.7.2 IBM API Connect 5.0.8.0 REMEDIATION/FIXES

Affected Product Addressed in VRMF APAR Remediation / First Fix IBM API Connect

5.0.0.0-5.0.6.4 5.0.6.5 LI79821 Addressed in IBM API Connect V5.0.6.5.

Management Server is impacted.

Follow this link and find the "APIConnect_Management" package:

https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=5.0.6.4&platform=All&function=all [https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=5.0.6.2&platform=All&function=all] IBM API Connect

5.0.7.0-5.0.7.2 5.0.8.1 LI79821 Addressed in IBM API Connect V5.0.8.1.

Management Server and Developer Portal are impacted.

Follow this link and find the "APIConnect_Management" package and
"APIConnect-Portal" package:

https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=5.0.8.0&platform=All&function=all [https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=5.0.7.0&platform=All&function=all] IBM API Connect

5.0.8.0 5.0.8.1 LI79821 Addressed in IBM API Connect V5.0.8.1.

Management Server and Developer Portal are impacted.

Follow this link and find the "APIConnect_Management" package and
"APIConnect-Portal" package:

https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=5.0.8.0&platform=All&function=all [https://www-945.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EWebSphere&product=ibm/WebSphere/IBM+API+Connect&release=5.0.7.0&platform=All&function=all] WORKAROUNDS AND MITIGATIONS
None

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v3 Guide [http://www.first.org/cvss/user-guide]
On-line Calculator v3 [http://www.first.org/cvss/calculator/3.0]

RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt]

CHANGE HISTORY
 06 December 2017: original document published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Question: Help with Security Bulletin: Multiple vulnerabilities in Node.js affect IBM API Connect (CVE-2017-1000381, CVE-2017-11499) I need to understand details regarding Security Bulletin: Multiple vulnerabilities in Node.js affect IBM API Connect (CVE-2017-1000381, CVE-2017-11499). Where can I find this information?

Answer:
CVEID:CVE-2017-1000381 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000381]
DESCRIPTION:c-ares could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in the ares_parse_naptr_reply() function when parsing NAPTR responses. By sending specially crafted DNS response packet, an attacker could exploit this vulnerability to read memory outside of the given input buffer and cause a denial of service.
CVSS Base Score: 6.5
CVSS Temporal Score: Seehttps://exchange.xforce.ibmcloud.com/vulnerabilities/128625 [https://exchange.xforce.ibmcloud.com/vulnerabilities/128625]for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)

CVEID:CVE-2017-11499 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11499]
DESCRIPTION:Node.js is vulnerable to a denial of service, caused by a flaw related to constant HashTable seeds. A remote attacker could exploit this vulnerability to flood the hash and cause a denial of service.
CVSS Base Score: 7.5
CVSS Temporal Score: Seehttps://exchange.xforce.ibmcloud.com/vulnerabilities/129465 [https://exchange.xforce.ibmcloud.com/vulnerabilities/129465]for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)


IBM Create backup of the ObjectServer database - United States MustGather; objectserver; backup TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Steps to create a backup of the ObjectServer database for troubleshooting.

RESOLVING THE PROBLEM
Provide the following information:

[/support/docview.wss?uid=swg21631606&aid=1][/support/docview.wss?uid=swg21631606&aid=2]

1. Create a temporary directory

mkdir /tmp/backup

2. Use nco_sql to obtain a backup

./nco_sql -server NCOMS
Password:
1> alter system backup '/tmp/backup';
2> go
(0 rows affected)
1> quit

3. Verify that /tmp/backup contains *.tab files.

4. Compressed /tmp/backup

5. Copy of ObjectServers properties file (i.e. NCOMS.props)

6. If you can provide the root password, do so.

[/support/docview.wss?uid=swg21631606&aid=3]

1. Create a temporary directory

mkdir c:\tmp\backup

2. Use nco_sql to obtain a backup

isql -S NCOMS -U root
Password:
1> alter system backup 'c:\tmp\backup';
2> go
(0 rows affected)
1> quit

3. Verify that c:\tmp\backup contains *.tab files.

4. Compressed c:\tmp\backup

5. Copy of ObjectServers properties file (i.e. NCOMS.props)

6. If you can provide the root password, do so.

Question: How do to restore corrupted Object server DB using data from Backup Object server in Linux? Error: E-REG-002-025: Region 'table_store', from directory '/opt/IBM/tivoli/netcool/omnibus/db/NCOMS/', has been recovered in a corrupt state: Extent statistics mismatch Error: E-OBX-102-020: Failed to start the storage system. (-490:Extent statistics mismatch)

Answer:
1. Create a temporary directory

mkdir /tmp/backup

2. Use nco_sql to obtain a backup

./nco_sql -server NCOMS
Password:
1> alter system backup '/tmp/backup';
2> go
(0 rows affected)
1> quit

3. Verify that /tmp/backup contains *.tab files.

4. Compressed /tmp/backup

5. Copy of ObjectServers properties file (i.e. NCOMS.props)

6. If you can provide the root password, do so.


IBM Couldn't validate parameters error logging in with IBM Datacap - United States login connect couldnt validate parameters TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Users are unable to log in with any client to any application. The Taskmaster Server (tms) log shows:

Connect couldn't validate parameters

SYMPTOM
This is most commonly seen on a new installed Taskmaster Server. Users attempting to login will receive a message stating that they cannot connect to the admin database.

CAUSE
Encryption is not yet fully set up, so FIPS key information cannot be located.

RESOLVING THE PROBLEM
If this is a new server where Datacap has never been run and encryption has not been set up at all, follow the instructions at Exporting encryption keys [http://www.ibm.com/support/knowledgecenter/SSZRWV_9.0.1/com.ibm.dc.install.doc/dcain011_copyto_cs1.htm].

If this is an existing server or a new server where the previous steps have been completed, distribute the dc_ktf.xml file to the client folder for all clients that will be used following the instructions at Importing encryption keys to Datacap computers [http://www.ibm.com/support/knowledgecenter/SSZRWV_9.0.1/com.ibm.dc.install.doc/dcain010_copyto_wtminstall1.htm].

Cross reference information Segment Product Component Platform Version Edition Enterprise Content Management Datacap Taskmaster Capture Not Applicable Windows 8.1.0

Question:
1040ez 9.0 Application  Hi

I have downloaded sample Datacap 9 applications (1040ez, Express, Survey) using below link and copied in my local system C:\Datacap and added reference in Datacap.xml file.

IBM Datacap 9.0 and IBM Datacap 9.0.1 DDK sample applications

But i'm unable to login Datacap Studio & Tmweb.net . (I tried to with re generating encryption keys but no luck).

Can anyone let me know the reason, anything I missed in configuration ?

My Datacap version in Local Machine

IBM Datacap 9.0.0.3

Build: v 9.0.0.72

Thanks

Answer:
If this is a new server where Datacap has never been run and encryption has not been set up at all, follow the instructions at Exporting encryption keys [http://www.ibm.com/support/knowledgecenter/SSZRWV_9.0.1/com.ibm.dc.install.doc/dcain011_copyto_cs1.htm].

If this is an existing server or a new server where the previous steps have been completed, distribute the dc_ktf.xml file to the client folder for all clients that will be used following the instructions at Importing encryption keys to Datacap computers


IBM Identify the application that has a WMQ queue opened - United States Identify application program connected queue TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Your WebSphere MQ queue manager will not stop if there are applications that still have a queue opened. Your goal is to allow a graceful stop of the queue manager, also called controlled (or quiesced) shutdown.

For example, the following runmqsc command for the queue Q1 shows that there is an application currently that has opened a queue, but it does not provide application name, or process id number (PID). The value for OPPROCS indicates 1 application has opened the queue for output (for doing a PUT).

display qstatus(Q1)
1 : display qstatus(Q1)
AMQ8450: Display queue status details.
QUEUE(Q1) TYPE(QUEUE)
CURDEPTH(0) IPPROCS(0)
LGETDATE( ) LGETTIME( )
LPUTDATE( ) LPUTTIME( )
MEDIALOG( ) MONQ(OFF)
MSGAGE( ) OPPROCS(1)
QTIME( , ) UNCOM(NO)

You want to determine the name of the application that currently has a queue open,

RESOLVING THE PROBLEM
Use the runmqsc display connection command to find the process id (PID) and application name.

Using the above example of the queue Q1, this is the complete command to invoke under runmqsc:

display conn(*) where(objname eq Q1) all

Example output:

AMQ8276: Display Connection details.
CONN(ACBDC64820001B01)
EXTCONN(414D5143514D5F414E47454C494C4C4F)
TYPE(CONN)
PID(7364)TID(1)
APPLTAG(WebSphere MQ\bin\amqsput.exe)APPLTYPE(USER)
ASTATE(NONE) CHANNEL( )
CONNAME( ) CONNOPTS(MQCNO_SHARED_BINDING)
USERID(x) UOWLOG( )
UOWSTDA( ) UOWSTTI( )
UOWLOGDA( ) UOWLOGTI( )
URTYPE(QMGR)
EXTURID(XA_FORMATID[00000000] XA_GTRID[] XA_BQUAL[])
QMURID(0.0) UOWSTATE(NONE)

The following fields are of interest:
PID(7364) => Process id
APPLTAG(WebSphere MQ\bin\amqsput.exe) => name of the application
USERID(x) => Userid that has invoked the application

For UNIX users:

One of the main purposes for the above technique is to eventually kill the process that is connected to the queue manager.

a) One option is to use the STOP CONN command under runmqsc. Using the above example, the corresponding command would be:
STOP CONN(ACBDC64820001B01)

b) The following SupportPac can be used to identify the applications and kill them if desired:

MS6B: WebSphere MQ Connection Management Utility [http://www.ibm.com/support/docview.wss?&uid=swg24017810]
This SupportPac is Category 4 (which means that the IBM MQ Support team does not support it)

PRODUCT ALIAS/SYNONYM
 WMQ MQ

Question:
Does ITCAM for MQ monitoring agent (kmq) use SYSTEM.MQXR.COMMAND.QUEUE causing Unknown Object Name [2085] event?

Using the ITCAM MQ Monitoring agent, we have a situation that generates alerts when a 2085 event (object unknown) occurs. We have recently seen alerts for the queue SYSTEM.MQXR.COMMAND.QUEUE
We found following technote:
Unknown Object Name [2085], SYSTEM.MQXR.COMMAND.QUEUE
http://www-01.ibm.com/support/docview.wss?uid=swg21681687

This technote does not mention Tivoli monitoring product, and only mentions monitoring products such as Nastel and InfraRed360.
Does Tivoli monitoring agent for WebSphere MQ use the SYSTEM.MQXR.COMMAND.QUEUE? We are try to find out which application is causing the 2085 event.

Answer:
Use the runmqsc display connection command to find the process id (PID) and application name.

Using the above example of the queue Q1, this is the complete command to invoke under runmqsc:

display conn(*) where(objname eq Q1) all


IBM Security Bulletin: Vulnerabilities in OpenSSL affect IBM MQ Advanced Message Security (CVE-2016-2177, CVE-2016-2178) - United States  SECURITY BULLETIN

SUMMARY
 OpenSSL vulnerabilities were disclosed on September 22 and 26, 2016 by the OpenSSL Project. OpenSSL is used by IBM MQ Advanced Message Security on the IBM i platform only. IBM MQ Advanced Message Security has addressed the applicable CVEs.

VULNERABILITY DETAILS
CVEID: CVE-2016-2177 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177]
DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by the incorrect use of pointer arithmetic for heap-buffer boundary checks. By leveraging unexpected malloc behavior, a remote attacker could exploit this vulnerability to trigger an integer overflow and cause the application to crash.
CVSS Base Score: 5.9
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/113890 [https://exchange.xforce.ibmcloud.com/vulnerabilities/113890] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

CVEID: CVE-2016-2178 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2178]
DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DSA implementation that allows the following of a non-constant time codepath for certain operations. An attacker could exploit this vulnerability using a cache-timing attack to recover the private DSA key.
CVSS Base Score: 5.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/113889 [https://exchange.xforce.ibmcloud.com/vulnerabilities/113889] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

AFFECTED PRODUCTS AND VERSIONS
IBM MQ V8

Maintenance versions 8.0.0.0 through 8.0.0.5 are affected.

IBM MQ V9

9.0.0.0 only

REMEDIATION/FIXES
IBM MQ V8

Apply fixpack 8.0.0.6 [http://www-01.ibm.com/support/docview.wss?uid=swg21995100]

IBM MQ V9

Apply fixpack 9.0.0.1 [http://www-01.ibm.com/support/docview.wss?uid=swg27048059]

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v3 Guide [http://www.first.org/cvss/user-guide]
On-line Calculator v3 [http://www.first.org/cvss/calculator/3.0]

RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt]

CHANGE HISTORY
 13 March 2017: Original version published
24 May 2017: Details for 9.0.0.1 added

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

RELATED INFORMATION
 A Japanese translation is available [http://www.ibm.com/support/docview.wss?uid=swg22000474]

Question: Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere MQ Advanced Message Security (CVE-2016-2177) I need to understand details regarding Security Bulletin: Vulnerabilities in OpenSSL affect IBM WebSphere MQ Advanced Message Security (CVE-2016-2177). Where can I find this information?

Answer:
CVEID: CVE-2016-2177 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2177]
DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by the incorrect use of pointer arithmetic for heap-buffer boundary checks. By leveraging unexpected malloc behavior, a remote attacker could exploit this vulnerability to trigger an integer overflow and cause the application to crash.
CVSS Base Score: 5.9
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/113890 [https://exchange.xforce.ibmcloud.com/vulnerabilities/113890] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)


IBM System Requirements for WebSphere MQ V8.0 - United States  PRODUCT DOCUMENTATION

ABSTRACT
 This document contains system requirements for WebSphere MQ V8.0 and a note about IBM WebSphere MQ Advanced entitlement.

CONTENT
IBM has provided customers with a Software Product Compatibility Reports (SPCR) tool where you can locate and find complete lists of supported operating systems, system requirements, prerequisites, and optional supported software for WebSphere MQ 8.0.

RHEL Compatible OS. Defect support is available for Linux environments that are fully compatible - both source and binary - with Red Hat Enterprise Linux V6. Unless stated otherwise, WebSphere MQ has not been specifically tested in such compatible environments. WebSphere MQ Support is therefore unable to assist in issues related to configuration and setup, or issues that are directly related to the linux environment itself. If issues arise that are related to the compatible linux environment, the user may need to contact the linux environment vendor for support, or the issue may need to be recreated inside an environment tested by IBM in order to receive WebSphere MQ support.

Virtualization. Defect support is available for virtualization environments where they relate to releases of this platform already supported by WebSphere MQ. Unless stated elsewhere in the system requirements WebSphere MQ has not been specifically tested in virtualization environments.

WebSphere MQ support is therefore unable to assist in issues related to configuration and setup, or issues that are directly related to the virtualization environment itself.

Please also refer to:
WebSphere MQ's support position on Virtualization, low-level hardware, file systems on networks and high availability. [http://www.ibm.com/support/docview.wss?uid=swg21392025]

The SPCR tool links to information about the minimum product levels that must be installed before opening a problem report with IBM WebSphere MQ Technical Support. The software versions and any maintenance levels listed in the tool have been explicitly verified as working.

Supported System Requirements:
The links below are located in the SPCR tool and go directly to the supported operating systems, prerequisites, system requirements, and optional supported software for the specific operating system.

WebSphere MQ 8.0

By Operating System
AIX [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProduct?deliverableId=1350550241693&osPlatform=AIX]
HP [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProduct?deliverableId=1350550241693&osPlatform=HP]
IBM i [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProduct?deliverableId=1350550241693&osPlatform=IBM%20i]
Linux [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProduct?deliverableId=1350550241693&osPlatform=Linux]
4690 (Managed File Transfer Agent Only) [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProduct?deliverableId=1350550241693&osPlatform=Other]
Solaris [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProduct?deliverableId=1350550241693&osPlatform=Solaris]
Windows [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProduct?deliverableId=1350550241693&osPlatform=Windows]
z/OS [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProduct?deliverableId=1350550241693&osPlatform=z/OS]

By Component
MQ Advanced Message Security [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProductByComponent?deliverableId=1350550241693&duComponent=Server_568DDB101AEF11E38F7D228059AF1569]
MQ Client [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProductByComponent?deliverableId=1350550241693&duComponent=Miscellaneous_569814401AEF11E38F7D228059AF1569]
MQ Explorer [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProductByComponent?deliverableId=1350550241693&duComponent=Desktop_56A6BA401AEF11E38F7D228059AF1569]
MQ Managed File Transfer Agent [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProductByComponent?deliverableId=1350550241693&duComponent=Miscellaneous_56910F601AEF11E38F7D228059AF1569]
MQ Managed File Transfer Service [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProductByComponent?deliverableId=1350550241693&duComponent=Server_568AA6C01AEF11E38F7D228059AF1569]
MQ Queue Manager [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProductByComponent?deliverableId=1350550241693&duComponent=Server_568C06501AEF11E38F7D228059AF1569]
MQ Resource Adapter [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProductByComponent?deliverableId=1350550241693&duComponent=Miscellaneous_5685EBD01AEF11E38F7D228059AF1569]
MQ Telemetry Server [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity-reports/report/html/softwareReqsForProductByComponent?deliverableId=1350550241693&duComponent=Server_568CF0B01AEF11E38F7D228059AF1569]

SPCR tool available for all software products:
The generic link to the IBM Software Product Compatibility Reports (SPCR) tool is below. You can access the tool for any product and obtain the supported operating systems, system requirements, and optional supported software for your product version.

Click the link below to reach the front page of SPCR:
Detailed system requirements for a specific product in SPCR [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity/softwareReqsForProduct.html]

Then choose the following options to obtain the supported operating systems, system requirements, and optional supported software for your product version.

1. Select the desired product.
2. Select the desired version.
3. Select your operating system.

----------------------------------------------------------------------------------------------------------------
IBM WebSphere MQ Advanced entitlement

IBM WebSphere MQ Advanced and IBM WebSphere MQ Advanced Idle Standby grants entitlement to the following components:

 * IBM WebSphere MQ
 * IBM WebSphere Advanced Message Security
 * IBM WebSphere Managed File Transfer Service
 * IBM WebSphere MQ Telemetry

IBM WebSphere MQ Advanced for Developers grants entitlement to the following components:  * IBM WebSphere MQ
 * IBM WebSphere Advanced Message Security
 * IBM WebSphere Managed File Transfer Service
 * IBM WebSphere MQ Telemetry
 * IBM WebSphere Managed File Transfer Managed Endpoint

----------------------------------------------------------------------------------------------------------------

Question: Can my system run MQ V8.0? Where are the system requirements listed, and are there any significant changes?

Answer: This document contains system requirements for WebSphere MQ V8.0 and a note about IBM WebSphere MQ Advanced entitlement.


IBM Upgrading to Jazz for Service Management Version 1.1.3.0 using Installation Manager results in a permission denied error - United States jazzsm1130relnotes TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 When upgrading Jazz for Service Management to Version 1.1.3.0 using Installation Manager, the installation fails with the following error:

Cannot run program "/space/IBM/JazzSM/ui/bin/wrapper.sh" (in directory "/space/IBM/JazzSM/ui/bin"): error=13, Permission denied [/space/IBM/JazzSM/install/tip/tipWrapp
erInstall.xml:215]

CAUSE
During the upgrade process the non-root user does not have the correct permissions to run the shell script. This is due to the following:
1. Jazz for Service Management is installed as a non-root user
2. Installation Manager is installed in user mode through root user

RESOLVING THE PROBLEM
The upgrade must be initiated by using the attached script, which gives the non-root user (who originally installed this Jazz for Service Management instance) the correct permissions for the upgrade process.

The script takes two mandatory arguments and one optional argument.

Usage: ./JazzSMgrpModeUpgrade.sh "IM_Install_Location"
"JazzSM_Install_Location [http://www.ibm.com/support/knowledgecenter/SSEKCU_1.1.3.0/com.ibm.psc.doc/ref/psc_r_pathnames.html]""[Response_file_with_absolute_Path]"

For example (showing default installation paths): ./JazzSMgrpModeUpgrade.sh "/home/root/IBM/InstallManager/" "/opt/IBM/JazzSM/" "/opt/Download/dash_upgrade_rsp.xml"

For IM GUI mode installation, provide the 2 mandatory arguments; IM_Install_Location and JazzSM_Install_Location.
This argument combination invokes Installation Manager in GUI mode and lead you through the rest of the upgrade process.

For IM Silent installation, provide all 3 arguments; IM_Install_Location , JazzSM_Install_Location, and Response_file_with_absolute_Path.
This argument combination invokes Installation Manager in silent mode to upgrade JazzSM.

JazzSMgrpModeUpgrade.sh [/support/docview.wss?uid=swg21985946&aid=2]JazzSMgrpModeUpgrade.sh [/support/docview.wss?uid=swg21985946&aid=1]

Question: How to fix error CRIMA1217E when upgrade JAZZ from 1.1.0 to 1.1.3 failed? How to fix problem when upgrade JAZZ from 1.1.0 to 1.1.3 failed?

Answer:
The upgrade must be initiated by using the attached script, which gives the non-root user (who originally installed this Jazz for Service Management instance) the correct permissions for the upgrade process.

The script takes two mandatory arguments and one optional argument.

Usage: ./JazzSMgrpModeUpgrade.sh "IM_Install_Location"
"JazzSM_Install_Location [http://www.ibm.com/support/knowledgecenter/SSEKCU_1.1.3.0/com.ibm.psc.doc/ref/psc_r_pathnames.html]""[Response_file_with_absolute_Path]"


IBM Datacap Taskmaster Capture ICR error code 12 - United States RecognizeFieldICR_C; Recostar; 12 TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 When performing field level ICR recognition using the action RecognizeFieldICR_C (), the batch aborts with error code 12.

SYMPTOM
From log file:

Executing 'RecognizeFieldEx' from 'Datacap.Recognition.Recostar.ICRCWrapperClass'. Parameter : <FieldName>
Recognition return status: 12(Not defined (not used))

CAUSE
The c_cr variable for ICR_C recognition is not set for the engine.

RESOLVING THE PROBLEM
In Datacap Studio, set the c_cr variable to USA prior to the call to recognition as follow:

SaveAsCurrentObjVariable("c_cr", "USA")
RecognizeFieldICR_C

Question:
RecognizePageFieldsICR_C aborts with Page Type change

I have an DeveloperWorks application that runs: Survey.  In the application PageID Task there is a function that sets the Page Type to ReliefForm (based on a barcode)

Does anyone know why when I change the SetPageType to set another name, the RecognizePageFieldsICR_C in the Profiler Task aborts?  If I put the name back the action runs fine.

Answer:
In Datacap Studio, set the c_cr variable to USA prior to the call to recognition as follow:

SaveAsCurrentObjVariable("c_cr", "USA")
RecognizeFieldICR_C